CVE-2025-30905

Summary

CVE-2025-30905 is a Cross-site Scripting (XSS) vulnerability affecting Ays Pro Secure Copy Content Protection and Content Locking. The flaw, which allows Stored XSS attacks, occurs during web page generation. Successful exploitation of this issue could result in the injection of malicious scripts into a victim's web browser, potentially leading to unauthorized access or data theft. Affected versions of Ays Pro Secure Copy Content Protection and Content Locking range from n/a through 4.4.3. Users are advised to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.